Hi,
it seems to be a problem with the LDAP/DNS infrastructure in the customers domain, because he reported back the following to me:
On first deployment from the console (to both Win7/WinXP mixed), the WinXP stations registered with <computername> to the SBC, the Win7 stations registered with <computername>.<domainname> and were listed as "banned" in the "Computer login audit trail".
However when he deletes all those Windows 7 PCs and re-creates them manually using the DNS host name <computername>.<domainname> they are connected successfully.
The customer is using an Linux domain controller, not Microsoft AD.
Any idea where the problem could be? Maybe a solution for an easier handling? Re-creating all computer objects (Win7) manually takes some time of course.